此版本的 GitHub Enterprise 已停止服务 2022-06-03. 即使针对重大安全问题,也不会发布补丁。 要获得更好的性能、改进的安全性和新功能,请升级到 GitHub Enterprise 的最新版本。 如需升级方面的帮助,请联系 GitHub Enterprise 支持。
Git � �签
Git � �签 API 允许您对 GitHub Enterprise Server 上的 Git 数据库读取和写入� �签对象。
关于 Git � �签 API
Git � �记类似于 Git 引用,但它指向的 Git 提交永远不变。 当您想要指向特定发行版时,Git � �记非常有用。 这些端点允许您在 GitHub Enterprise Server 上的 Git 数据库中读取和写入� �记对象。 Git � �记 API 只支持� �注的� �记对象,而不支持轻量级� �记。
Create a tag object
Note that creating a tag object does not create the reference that makes a tag in Git. If you want to create an annotated tag in Git, you have to do this call to create the tag object, and then create the refs/tags/[tag] reference. If you want to create a lightweight tag, you only have to create the tag reference - this call would be unnecessary.
Signature verification object
The response will include a verification object that describes the result of verifying the commit's signature. The following fields are included in the verification object:
| Name | Type | Description | 
|---|---|---|
verified | boolean | Indicates whether GitHub considers the signature in this commit to be verified. | 
reason | string | The reason for verified value. Possible values and their meanings are enumerated in table below. | 
signature | string | The signature that was extracted from the commit. | 
payload | string | The value that was signed. | 
These are the possible values for reason in the verification object:
| Value | Description | 
|---|---|
expired_key | The key that made the signature is expired. | 
not_signing_key | The "signing" flag is not among the usage flags in the GPG key that made the signature. | 
gpgverify_error | There was an error communicating with the signature verification service. | 
gpgverify_unavailable | The signature verification service is currently unavailable. | 
unsigned | The object does not include a signature. | 
unknown_signature_type | A non-PGP signature was found in the commit. | 
no_user | No user was associated with the committer email address in the commit. | 
unverified_email | The committer email address in the commit was associated with a user, but the email address is not verified on her/his account. | 
bad_email | The committer email address in the commit is not included in the identities of the PGP key that made the signature. | 
unknown_key | The key that made the signature has not been registered with any user's account. | 
malformed_signature | There was an error parsing the signature. | 
invalid | The signature could not be cryptographically verified using the key whose key-id was found in the signature. | 
valid | None of the above errors applied, so the signature is considered to be verified. | 
参数
| � �头 | |||||||
|---|---|---|---|---|---|---|---|
| 名称, 类型, 描述 | |||||||
acceptstringSetting to   | |||||||
| 路径参数 | |||||||
| 名称, 类型, 描述 | |||||||
ownerstring必选The account owner of the repository. The name is not case sensitive.  | |||||||
repostring必选The name of the repository. The name is not case sensitive.  | |||||||
| 正文参数 | |||||||
| 名称, 类型, 描述 | |||||||
tagstring必选The tag's name. This is typically a version (e.g., "v0.0.1").  | |||||||
messagestring必选The tag message.  | |||||||
objectstring必选The SHA of the git object this is tagging.  | |||||||
typestring必选The type of the object we're tagging. Normally this is a  可以是以下其中之一:   | |||||||
taggerobjectAn object with information about the individual creating the tag.  | |||||||
Properties of the | |||||||
| 名称, 类型, 描述 | 
|---|
namestring必选The name of the author of the tag  | 
emailstring必选The email of the author of the tag  | 
datestringWhen this object was tagged. This is a timestamp in ISO 8601 format:   | 
HTTP 响应状态代� �
| 状态代� � | 描述 | 
|---|---|
201 | Created  | 
422 | Validation failed  | 
代� �示例
curl \
  -X POST \
  -H "Accept: application/vnd.github.v3+json" \ 
  -H "Authorization: token <TOKEN>" \
  http(s)://HOSTNAME/api/v3/repos/OWNER/REPO/git/tags \
  -d '{"tag":"v0.0.1","message":"initial version","object":"c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c","type":"commit","tagger":{"name":"Monalisa Octocat","email":"octocat@github.com","date":"2011-06-17T14:53:35-07:00"}}'Response
Status: 201{
  "node_id": "MDM6VGFnOTQwYmQzMzYyNDhlZmFlMGY5ZWU1YmM3YjJkNWM5ODU4ODdiMTZhYw==",
  "tag": "v0.0.1",
  "sha": "940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "url": "https://api.github.com/repos/octocat/Hello-World/git/tags/940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "message": "initial version",
  "tagger": {
    "name": "Monalisa Octocat",
    "email": "octocat@github.com",
    "date": "2014-11-07T22:01:45Z"
  },
  "object": {
    "type": "commit",
    "sha": "c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c",
    "url": "https://api.github.com/repos/octocat/Hello-World/git/commits/c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c"
  },
  "verification": {
    "verified": false,
    "reason": "unsigned",
    "signature": null,
    "payload": null
  }
}Get a tag
Signature verification object
The response will include a verification object that describes the result of verifying the commit's signature. The following fields are included in the verification object:
| Name | Type | Description | 
|---|---|---|
verified | boolean | Indicates whether GitHub considers the signature in this commit to be verified. | 
reason | string | The reason for verified value. Possible values and their meanings are enumerated in table below. | 
signature | string | The signature that was extracted from the commit. | 
payload | string | The value that was signed. | 
These are the possible values for reason in the verification object:
| Value | Description | 
|---|---|
expired_key | The key that made the signature is expired. | 
not_signing_key | The "signing" flag is not among the usage flags in the GPG key that made the signature. | 
gpgverify_error | There was an error communicating with the signature verification service. | 
gpgverify_unavailable | The signature verification service is currently unavailable. | 
unsigned | The object does not include a signature. | 
unknown_signature_type | A non-PGP signature was found in the commit. | 
no_user | No user was associated with the committer email address in the commit. | 
unverified_email | The committer email address in the commit was associated with a user, but the email address is not verified on her/his account. | 
bad_email | The committer email address in the commit is not included in the identities of the PGP key that made the signature. | 
unknown_key | The key that made the signature has not been registered with any user's account. | 
malformed_signature | There was an error parsing the signature. | 
invalid | The signature could not be cryptographically verified using the key whose key-id was found in the signature. | 
valid | None of the above errors applied, so the signature is considered to be verified. | 
参数
| � �头 | 
|---|
| 名称, 类型, 描述 | 
acceptstringSetting to   | 
| 路径参数 | 
| 名称, 类型, 描述 | 
ownerstring必选The account owner of the repository. The name is not case sensitive.  | 
repostring必选The name of the repository. The name is not case sensitive.  | 
tag_shastring必选 | 
HTTP 响应状态代� �
| 状态代� � | 描述 | 
|---|---|
200 | OK  | 
404 | Resource not found  | 
代� �示例
curl \
  -H "Accept: application/vnd.github.v3+json" \ 
  -H "Authorization: token <TOKEN>" \
  http(s)://HOSTNAME/api/v3/repos/OWNER/REPO/git/tags/TAG_SHAResponse
Status: 200{
  "node_id": "MDM6VGFnOTQwYmQzMzYyNDhlZmFlMGY5ZWU1YmM3YjJkNWM5ODU4ODdiMTZhYw==",
  "tag": "v0.0.1",
  "sha": "940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "url": "https://api.github.com/repos/octocat/Hello-World/git/tags/940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "message": "initial version",
  "tagger": {
    "name": "Monalisa Octocat",
    "email": "octocat@github.com",
    "date": "2014-11-07T22:01:45Z"
  },
  "object": {
    "type": "commit",
    "sha": "c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c",
    "url": "https://api.github.com/repos/octocat/Hello-World/git/commits/c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c"
  },
  "verification": {
    "verified": false,
    "reason": "unsigned",
    "signature": null,
    "payload": null
  }
}